Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Ruby' disclosed a bug submitted by b'survivor73' 
b'Bugs'

15 Dec 2017

b'Informatica' disclosed a bug submitted by b'0ways' 
b'[marketplace.informatica.com]-Reflected XSS '

15 Dec 2017

b'Informatica' disclosed a bug submitted by b'jubabaghdad' 
b'[marketplace.informatica.com] - Stored XSS at Company & Job title field'

15 Dec 2017

b'Legal Robot' disclosed a bug submitted by b'gujjuboy10x00' 
b'No notification of change email feature'

13 Dec 2017

b'Rockstar Games' disclosed a bug submitted by b'someguyfromthepast' 
b'Unserialize leading to arbitrary PHP function invoke'

13 Dec 2017

b'Mavenlink' disclosed a bug submitted by b'cablej' 
b'Password reset link injection allows redirect to malicious URL'

13 Dec 2017

b'HackerOne' disclosed a bug submitted by b'abidbaseer' 
b'Open redirect deceive in hackerone.com via another open redirect link.'

13 Dec 2017

b'LocalTapiola' disclosed a bug submitted by b'w00tr00t' 
b'PHPMYADMIN Setup is accessible without authentication on https://lml.lahitapiola.fi/'

13 Dec 2017

b'LocalTapiola' disclosed a bug submitted by b'tonsku' 
b'Possible sweet32 lahitapiola.fi'

13 Dec 2017

b'LocalTapiola' disclosed a bug submitted by b'mr_edwards' 
b'Single User DOS on SelectedLocale -cookie (verkkopalvelu.tapiola.fi)'

13 Dec 2017

b'Infogram' disclosed a bug submitted by b'saikiran-10099' 
b'No Rate Limit on account deletion request(Leads to huge email flooding/email bombing)'

12 Dec 2017

b'Infogram' disclosed a bug submitted by b't-pwn' 
b'Bruteforcing Coupons'

12 Dec 2017

b'The Internet' disclosed a bug submitted by b'pwnsdx' 
b'Unsecure: Bypass alerts of Little Flocker / Little Snitch / HandsOff! / BlockBlock (same concept can be applied to other security tools)'

12 Dec 2017

b'Infogram' disclosed a bug submitted by b'mksecurity' 
b'Non Critical Code Quality Bug / Self XSS on Map Editor'

12 Dec 2017

b'Infogram' disclosed a bug submitted by b'blackpanther_akaash' 
b'No Rate limit on Password Reset Function'

12 Dec 2017

b'Infogram' disclosed a bug submitted by b'zubair' 
b'Javascript Payload reflected Back in Report Embed Code'

12 Dec 2017

b'HackerOne' disclosed a bug submitted by b'wh47' 
b'Content Security Policy not applied to error pages at multiple HackerOne endpoints'

12 Dec 2017

b'WordPress' disclosed a bug submitted by b'morningstar' 
b'Stored xss via template injection'

11 Dec 2017

b'Infogram' disclosed a bug submitted by b'muon4' 
b'New team invitation functionality allows extend team without upgrade'

11 Dec 2017

b'Ubiquiti Networks' disclosed a bug submitted by b'dblack' 
b'Command injection in the process of downloading the latest version of the cloud key firmware through the unifi management software.'

11 Dec 2017

1 ... 525 526 527 528 529 ... 776

BY DENIS WERNER - @NOBBD - IMPRESSUM